The fundamental problem of quantum cryptography 

Marcin Pawlowski and Marek Czachor 
Katedra Fizyki Teoretycznej i Metod Matematycznych 
Politechmka Gdanska, 80-952 Gdansk, Poland 

It is known that statistical predictions of quantum theory do not depend on its interpretation. 
In particular, an experiment cannot distinguish between the Copenhagen interpretation (involving 
no hidden variables) and the de Broglie-Bohm interpretation based on nonlocal hidden variables. 
Quantum cryptographic protocols, such as BB84 or E91, are secure and mutually equivalent as long 
as one works within the framework of Copenhagen interpretation. But they are inequivalent and 
insecure if one considers attacks allowed by the de Broglie-Bohm interpretation. The fundametal 
problem of quantum cryptography is therefore this: Are all the statements about security of quantum 
protocols based on our belief in one of the two allowed interpretations of quantum mechanics? We 
show that this is not the case. Ekert-type protocols can be modified in a way that makes them secure 
even if the de Broglie-Bohm nonlocal hidden variables exist. Bennett-Brassard-type cryptography 
does not seem to allow for such a correction. 

PACS numbers: ????? 



I. INTRODUCTION 

Our confidence in classical public key cryptosystems such as RSA is based on a belief that there is no efficient 
algorithm that allows one to find the private key given only the public one. Since there is no proof that such a 
classical algorithm does not exist, and we know that quantum Shor's algorithm [lj is capable of doing just that, we 
cannot consider RSA fundamentally secure. Hence the need for quantum cryptosystems which should, in principle, be 
safe against any attack. Protocols such as BB84 and E91 arc believed to fulfill the criterion. The first of them takes 
its strength from the von Neumann postulate, since gaining any knowledge about a system being sent would result in 
wavefunction collapse and loss of information carried by the system |2|, and this is detectable. Ekert's protocol bases 
on nonlocal correlations within the system 3] . Here any attempt to extract information changes the initial entangled 
state decreasing the Bell expectation value. Both protocols assume that the Copenhagen interpretation is true. Such 
an assumption is not fully justified since there are other interpretations of quantum mechanics that produce identical 
observable results. 

In the de Broglie-Bohm approach (which so far predicts outcomes undistinguishable form those given by the 
Copenhagen interpretation |4j) there is no need to invoke the wavefunction collapse hypothesis. A hidden- variable 
description of Stern-Gerlach measurements for both a single spin and a pair of spins in a singlet state is given in 
detail in the monograph [Tj. The results of measurements can be deduced from the position of the particle trajectory 
(a hidden variable). An eavesdropper knows for sure and in advance the results of spin measurements. Accordingly, 
the usual protocols are insecure. Apparently, the situation is not dramatically better than in the case of classical 
cryptography; the fact that we may not believe in nonlocal hidden variables is not yet a guarantee of fundamental 
security of our quantum cryptosystems. 

In the present paper we show that this is not the end of the story. We prove that even in an interpretation that 
includes nonlocal hidden variables it is possible to create a secure quantum key distribution protocol. The crucial idea 
is to take advantage of the possibility of flipping-over the spin of particle in the lab of Alice, say, by a measurement 
performed by Bob in his lab. The effect is nonlocal, preserves one-to-one correlations typical of the singlet state, and 
is possible if and only if the two particles are in an entangled state. In such a protocol the knowledge of particle 
positions in transit between the source and the labs of Alice and Bob is not sufficient for determining the key. The 
key is literally created at the very last moment when the particles are already in the labs of Alice and Bob. The 
security is here a consequence of nonlocality. 

The fact that such a possibility may exist followed from the earlier study of nonlocal hidden-variables models of 
spin-1/2 and the singlet state Still, the toy models of EPR correlations were not reliable enough. We needed a 
hidden- variable model that is a candidate for a theory equivalent to standard quantum mechanics. This is why in the 
present paper we have concentrated on the de Broglie-Bohm model. The analysis follows, with slight modifications, 
the one given in Q. 
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II. DOUBLE STERN-GERLACH EXPERIMENT 



We consider an experiment where a pair of particles in the singlet state is sent along the y axis to Alice and Bob. 
Each of the particles enters then the Stern-Gerlach apparatus. The magnetic fields in both devices are aligned in the 
same direction, and each particle spends in the field the same time T. Both particles have mass m and magnetic 
moment [i. We make the following standard assumptions: 

• We suppose that the magnetic fields are large enough to neglect the kinetic part of the Hamiltonian during the 
time of interaction of a particle with the fields. 

• We also suppose that the time T is short enough not to change particles position in the y-direction. During the 
interaction with the field the particle is only given velocity in z-direction. 

• We will consider fields of the form: B(x, y, z) — B(z) = Bq + Bz. Such fields are clearly non-physical, but their 
use is justified by Bohm in • 

• We assume that particles' motion along the y axis is constant throughout the experiment. 

Both assumptions and calculations below are based on those given by Holland in 0. 

We take the fields in Alice's device to be B\(z) and in Bob's B%{z)^ and given explicitly by 

B x (z) = B +Bz (1) 
B 2 {z) = sK{B + Bz) (2) 

where we assume B > 0, K > 1 and s = ±1 is a number randomly chosen by Bob. 
The initial wavefunction at the entrance is in the singlet state 

ipo(zi,z 2 ) = fi(z 1 )f 2 (z 2 )-^=(u + v- - u-v+) (3) 

where u± and v± are eigenvectors of the spin operators in the z-direction corresponding to the eigenvalues ±1, and 
we choose /i(^i) and f 2 (z 2 ) to be Gaussian. 

We now use our assumption that the fields are strong enough to surpass the kinetic part of the Hamiltonian and 
write the Pauli equation in the form 

ih— = [fj,Bi(z 1 )a z O I + fiB 2 (z 2 )I <8> cr z ] ^ (4) 
Solving it and taking as an initial condition we have 

It is convenient to Fourier analyze functions fi(z\) and f 2 (z 2 ) 

i r + °° 

h{ Zl ) = -= / dktg^kt)^ (6) 
1 f + °° 

f 2 (z 2 ) = -= / dk 2 g 2 (k 2 )e ik ^ (7) 

V27T J-oo 

J5J becomes then 

-foo /—too 



i r-t-oo r-t-oo 

^{z x ,z 2 ,t) = — =- / dki / dfc 2ff2 (fc 2 )e 4fc2Z2 ff i(fc 1 )e 4fclZl 

2V27T J-oc J -oo 



X 



^ e ~^(Bo(l-sK)+Bz 1 -sKBz 2 )t u+v ^ _ e -i%(B (-l+sK)-Bz 1 -sKBz 2 )t u _ v+ ^ ^ 



After leaving the field the system evolves according to the free Schrddinger equation: 



h 2 ( d 2 d 2 



at 2m yozf oz 2 • 
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Its general solution is of the form 

/+oc r + co 

dfa j dk 2 yt uk2 {z 1 ,z 2 )e-% 
-oo J — oc 

where 



fc i^2 u a Vb 



a,b=± ' 



d 2 d 2 \ h 2mE 



Now l|10[) becomes the initial condition leading to 

#Sl,Z2,T) = *(«i, z 2 ,0) 



Comparing we get 



Using ijTTJl we calculate: 



-^g 2 (fc 2 )e l ' £2Z2 gi(fci)e l ' ClZl e-^(- B o(i-^)+s Zl ^ ;5 KS Z2 ) 
2V2?r 

' 5 2 (fc 2 )e ifc2Z2 5i(fci)e ifclZl e~ l ^ : ( iJo ^ 1+sK ^ Bzi - sKBz2 ) 



fci.fca 



ft 2 

2m 




ft 2 
2m 





Substituting explicit expressions for g\ and 172 

(0-113) and (Uni-CZI) to (JTUJ) we have 

27T^/7r 

+00 



92(k 2 ) 



2_ai 

7T 



a ° c -i^(B a (-l+sK)-Bz 1 +sKBz 2 ) 

2TTy/TT 

|> + OC „ />+oo 9 



Integrating and rearranging we get 

1 itr,^- 1 ( V \ i( a + s 2 K 2 )B 2 » 2 T 2 t Rt , 2 , 2^ 1 r _2 1 ,2> (1 + s 2 Jf 2 )i? 2 >, 2 T 2 1 2 

z 2 , = V » / e \ 8mCT o e J e 4 <* e <t m <r e 

2cr V7re 



x e » 



iiif(B (l-sK)+Sz 1 -sKSz 2 ). 



(10) 

(11) 

(12) 

(13) 
(14) 

(15) 

(16) 
(17) 



(18) 



(19) 



-e ' R 



(z 1 -sKz 2 ')BpiTt _ ■ h(z 1 -sKz 2 ) B ^ Tt 

ii^(B (~l+sK)-Bz 1 +sKBz 2 ) e iT^l g 1 i^V^ 



(20) 



4 



where e = 1 



, 4 2 . From the conservation law 



we get currents defined by 



Ja 



2mi 



dp dji dj2 
dt dzi dz 2 



dz a \ dz a 



a = 1,2 



(21) 



(22) 



Its easy to find that 
1 



1 /„2 . 2n (l + s 2 JC 2 ).B 2 M 2 r 2 t 2 



2CTq7T£ 



1 



Jl = 



J2 



2CTo7T£ 



2CTq7T£ 







(1 + s 2 


K 2 )B 2 ji 2 T 2 t 2 






(1 + s 2 


K 2 )B 2 ji 2 T 2 t 2 


2m 2 ^ e 



cosh 



(zi - sKz 2 )BpTt\ 
ma 2 e J 



BuT ( (z\ — sKz2)BuTt\ htzi ( (z\ — sKz2)BuTt\ 

— — smh 5 + — cosh 1 ' 

he \ ma^e ) 

sKBfiT 



mane 



) 



(23) 



(24) 



he 



sinh 



(zi — sKz2)BfiTt\ htZ2 



■ cosh 



(zi — sKz2)B[iTt\ 



(25) 



Introducing velocity as a hydrodynamical variable from the formula j a = pv a we derive velocities (in z-direction) of 
each particle 



1)2 



h 2 tz 1 

Am 2 a^e 
h 2 tz 2 

4to 2 (Tq£ 



BuT , / (zx- sKz 2 )BuTt\ 
tanh I 5 

TO(7g£ / 

sKz 2 )B\iTt 



me 



f^tanh(^ 



me 



maze 



(26) 
(27) 



In the causal interpretation the particles center of mass has a well-defined translational motion implied by its initial 
position and velocity. In the case of homogeneous fields only first parts of velocities survive and particles trajectory 
is hyperbola which results from the natural spreading of the wave packet. For large B and small t the second part 
dominates and can move the particle to either positive or negative side of the xy plane. When t — > 00 the second part 
approaches and the motion is governed by the first part, but since the sign of velocity is then the same as the sign 
of the z component the direction of translational motion will not change. 
Now we will show how this result can be used to send information. 



III. THE PROTOCOL 

1. Alice, Bob or a third party (it is not significant to the protocol) generates N pairs in the singlet state ©. 

2. Bob generates two random numbers s = ±1 and 6 — {0, |}. And aligns his device at an angle 6 to Alice's. 

3. Let the size of the entrance slit of each of the devices be d. Then, basing on the points on the screen where 
his particles have landed, Bob can calculate whether the position of his particle at the entrance was too close to the 
center of the device; the criterion is the inequality 



Z20 < 



2K 



(28) 



If the particle was too close Bob proclaims this result and this instance is disregarded. 



4. As we have shown above the outcome of the experiment (which side of the xy plane each particle gets to) depends 
only on the second part of the velocity equation (assuming B is large enough) and, of course, initial position. Thus 
we neglect first parts in f2*6^l and l|27|l: 



t'i 



t'2 



BpT tanh / {zi - sKz 2 )BnTt \ 
me \ ma^e J 



sKBaT , f(z 1 -sKz 2 )BaTt\ 
= tanh I ^ I 



me 



ma^e 



(29) 
(30) 
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It is easy to notice that 

W A = sgn(ui) = -sgn(z 20 )s (31) 
W B = sgn(w 2 ) = sgn(z 2 o) (32) 

We will consider Wa and Wb to be outcomes of experiments form Alice's and Bob's points of view. Figures 1 and 2 
show the trajectories of pairs of the particles for different values of s (computed numerically). Initial positions have 
been taken the same in both figures. 

5. Bob proclaims 8 for every instance of experiment. 

6. Bob randomly chooses half of the instances of the experiment, and proclaims Wb and s (5 is already publicly 
known). Alice proclaims Wa corresponding to each of proclaimed Wb- If in any case for 8 — Wb ~ Was then the 
procedure is aborted. If not, for both values of s separately, the Bell's expectation value is checked and if it differs 
from 2-\/2 too much the procedure is also aborted. 

7. We take values Wa, for 8 = 0, to be the bits of the key. Alice knows it since its implied by the side of the screen 
her particle landed on. Bob knows s so he too can find the bit of the key, as W B = —Was. Since s is a random 
number chosen by Bob, not correlated in any way with the state of the system before the particles entered Alice's 
and Bob's labs, no knowledge about system prior to experiment can lead to the discovery of the key. 
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FIG. 1: Trajectories of particles for s = +1. We see that the particles move in the opposite directions along z axis. 




FIG. 2: Trajectories of particles for s = —1. Here Bob's and Alice's particles move in the same direction along z axis. 
Comparing it with Fig. 1 we see that changing the value of s has no effect on the outcome of the experiment at Bob's (though 
the trajectory of his particle is slightly affected) and it flips the outcome of the experiment at Alice's. 



